v1.4.5

• docs: the tun form arms the VPN, the poll is the fallback (c2bed3f)
• android: the tun form arms the VPN before creating its entrypoint (36712dd)

v1.4.4

• docs: the hub does not need wisper either (b35df1a)
• android: build the APK in one docker build, with the toolchain prebuilt (6773a5a)
• p2p: the identity key lives under wisper's config dir, not $XDG_CONFIG_HOME (2d188f1)

v1.4.3

• android: read the entrypoint list as the array it is (0766030)

v1.4.2

• fix(tunnel): close a handed-over fd portably (86f5b13)

v1.4.1

• test(tunnel): a route is the service's queue, do not Accept on it (a064e40)

v1.3.0

• docs: assess tun networking, desktop spoke and hub first (bace090)
• fix(ui): back leaves the editor, and the home tab survives the page (2deaae8)
• test(ui): render the real page with Playwright, inside docker (5e782c2)
• fix(ui): the peers page loads its rows, not only the tunnel (b146b85)
• fix(ui): close the section that nested the tunnel page's lower blocks (86af465)
• p2p: a peer can be switched off without leaving the list (02127a4)
• chore: bump p2p v0.7.2 (the tighter direct keepalive is negotiated) (aae3dc7)
• chore: bump p2p v0.7.1 (a direct session's liveness is its own keepalive's) (f204218)

v1.2.0

• tunnel: check the writes and deadlines in the udp host test (c2281f7)
• api: drop a dead assignment in the peers test (5a19296)
• chore: bump p2p v0.7.0 (a punch dials the peer's current candidates) (85bc0c6)
• web: relay draws one icon, and the transport badge a size of its own (f918ccc)
• log: one pipeline, and it is slog (2b6b057)
• p2p: only the dialing side punches at startup (0633a4c)
• p2p tunnel: warm the allowlist too (6c16948)
• p2p entrypoint: warm the peer's path when the service starts (64ce3de)
• p2p: more air between the entrypoint card's transport icon and its created-at (ca7566c)
• p2p: the entrypoint card's transport is one small icon, top right (cf7f31f)
• p2p: one word per peer badge, and no transport on a tunnel card (84090de)
• p2p: do not punch against a STUN server that never answers (f7dcfd1)
• p2p: show the transport on the home list too, with the reason (1b55e25)
• p2p: mark each peer with the path its traffic takes (d95bb1b)
• p2p: suggest two public STUN servers on the settings field (00cde5c)
• p2p: test the STUN server from the settings page (f03d1a8)
• p2p: a direct hole-punched path, on by default (b8f2f1f)
• feat(ui): a peers page for a p2p tunnel's allowlist (d6855c1)
• feat(api): save a p2p tunnel's allowlist on its own (428a5be)
• test(p2p),docs: udp e2e assertions and the integration notes (f31374b)
• feat(entrypoint): a udp protocol for the p2p entrypoint (1ba803c)
• feat(tunnel): serve udp peers with the reverse p2p tunnel (ca9345d)
• chore: gofmt (f7f0f86)
• chore: adapt to p2p v0.5.0 (endpoint API) (185d910)
• fix: keep a p2p entrypoint's peer key across restarts (83e74e0)
• feat: per-peer rates, aligned table, one peer list (2a30864)
• feat: count traffic per p2p peer (b6c981f)
• feat: give p2p peers display aliases (7d42097)
• feat: list the live peers on a p2p tunnel (7428511)
• feat(ui): explain the relay CA file field (f83ed26)
• fix(ui): give the CA field's divider room to breathe (1838d01)
• chore: bump p2p v0.4.3 (dial cause surfaced) (1957fee)
• feat(ui): show the relay probe error in red (7193024)
• feat(ui): layout the relay test like the inspector row (575971a)
• feat: test the DERP relay from the settings page (3464b59)
• fix(ui): shorten the key warning wording (f1c8001)
• feat(ui): warn that the p2p identity key is a credential (326b173)
• fix(ui): mask keys by length, one dot per character (08e00ed)
• feat(ui): mask p2p keys by default (487c196)
• feat(ui): one P2P block in settings, with a described secure toggle (9cb46bf)
• fix(ui): always show the p2p identity key (c67263d)
• docs: the config file is wisper.yaml, not config.yml (047d2a5)
• test(tunnel),docs: allowlist e2e (incl. refusal) and usage (8625416)
• feat(ui): allowed-peers editor and identity idle state (77c52ba)
• feat(api): tunnel peer allowlist and the p2p running state (c029abc)
• feat(tunnel): peer allowlist (Peers) and on-demand p2p identity (8b330e1)
• docs: tunnel allowlist (Peers) and on-demand identity in spec and plan (8869e83)
• docs: the peer-routed reverse side (shared host identity) (8057463)
• test(tunnel): peer-routed reverse e2e with stats (750eb03)
• fix(tunnel): count peer-route traffic in the tunnel's service stats (3f0f615)
• feat(ui): p2p identity card and the tunnel peer field (77d1f68)
• feat(api): accept the peer key when creating a p2p tunnel (94d3d61)
• feat(api): expose the process-wide p2p identity (9615dbf)
• feat(entrypoint): p2p entrypoint uses the shared host identity (ae27f99)
• feat(tunnel): p2p tunnel serves via the shared host and peer route (7a925be)
• feat(tunnel): process-wide p2p host manager with peer routes (615abcd)
• chore(tunnel): adopt the Tunnel/Dial API rename (299e4ad)
• chore: bump p2p v0.4.2 and x v0.18.0 (2a53982)
• docs: add the rename pre-step to the shared-host plan (6610d98)
• docs: Tunnel naming in the spec and plan (82facd2)
• docs: adopt Provider.Listen/Dial in the spec and plan (fa3665b)
• docs: move the p2p plan into the p2p repo (b65407e)
• docs: plan the wisper shared-host adoption (28e612b)
• docs: plan the p2p Host.Listen mode (21d5819)
• docs: spec the Host.Listen redesign (inbound streams to the embedder) (34256ec)
• feat(ui): hide the tunnel id for p2p entrypoints (f440357)
• docs: p2p entrypoint (out-dial side) usage (83da646)
• feat(ui): p2p entrypoint type, peer-key field and hint (fb02895)
• fix(api,tunnel): drop a redundant nil guard and keep the p2p e2e out of the real config dir (805fd0a)
• docs: sync the entrypoint plan with the API/e2e findings (5d391a5)
• test(tunnel): e2e for the p2p entrypoint (dials a peer by key) (f604c4d)
• feat(api): wire the p2p entrypoint type and its key cleanup (bb44b7f)
• feat(entrypoint): p2p entrypoint type (dial out to a peer key) (ab646bc)
• feat(tunnel): carry the peer key in options/config and export the p2p helpers (89a1bdd)
• docs: plan the p2p entrypoint (out-dial side) (2a04424)
• docs: spec the p2p entrypoint (out-dial side) (de93199)
• chore: bump p2p to v0.4.1 and drop the workspace-only caveats (4459856)
• feat(ui): hide the recording control for p2p tunnels (f4e0a69)
• docs: record the private p2p mode (usage, lifecycle, boundaries) (21c2910)
• feat(ui): private p2p tunnel type, settings and peer-key hint (89a6d71)
• test(tunnel): e2e for the private p2p mode (peer dials in by key) (67579d1)
• fix(tunnel,api): guard nil p2p settings and keep the key across tunnel updates (29282c3)
• docs: plan the nil-settings guard and the key-preserving update path (56fea5a)
• feat(api): wire the p2p tunnel type and the p2p settings (cf70509)
• feat(tunnel): default the p2p relay to wss://derp.gost.run/derp (455ca66)
• docs: sync the spec with the implemented p2p tunnel details (92236a5)
• docs: default the p2p relay in the design spec (fcf6c7e)
• docs: fix the restart snippet in the plan (ec4332c)
• docs: default the p2p relay to wss://derp.gost.run/derp in the plan (8ac8d54)
• feat(tunnel): private p2p tunnel type (embedded host, per-tunnel key) (cbaf2fe)
• feat(config): add p2p settings (derp relay, TLS options) (0ff2c21)
• docs: sync the plan's self-review note (3e16da9)
• docs: plan the wisper private p2p mode (b394e2b)
• docs: spec the wisper private p2p mode (reverse side) (ecb3d45)
• docs: sync the spec's deliverables with the fourth revision (7cc7bea)
• test(tunnel): align the udp harness with the framing fix (e0022cc)
• docs: record the measured p2p udp entrypoint limitations (8f61bfe)
• test(tunnel): pin the two-client collision on the p2p udp channel (R3) (ffbcffe)
• docs: retract the entrypoint addressing hypothesis in the verification spec (f70f49e)
• test(tunnel): drop the no-op addressing shim and fold R1 into R0 (c4654c2)
• test(tunnel): pin the in-process provider framing gap (R1) (43c192d)
• test(tunnel): pin the p2p udp entrypoint addressing failure (R0) (7daf085)
• docs: sync the plan's R2 expectation with the retry-loop signature (3ccf040)
• test(tunnel): in-process udp entrypoint harness over a real derper (4e40b79)
• docs: retry-loop the baseline and measure the collision under keepalive (93e099c)
• docs: amend the udp verification for the measured bring-up behavior (5ab5fd4)
• docs: fix the derper cache-root arithmetic in the plan (b1f72b2)
• test(tunnel): run derper from the local image for the p2p udp harness (175d7ee)
• docs: plan the p2p udp entrypoint verification (935178f)
• docs: add the entrypoint addressing seam to the udp verification spec (60eb8af)
• docs: spec the p2p udp entrypoint verification (5131adb)
• docs: turn the p2p integration note into a repo doc (260dc99)
• docs: add p2p integration notes (3dec183)
• feat(tunnel): embed the p2p transport in-process (2505a06)
• test(scripts): also smoke the udp entrypoint (3cd765b)
• test(scripts): add a local-relay runtime smoke for all tunnel types (4b8ec09)
• chore: bump deps (core v0.6.1, x v0.17.2) (60b29fc)
• Revert "fix(extension): use Proxy-Authorization for tunnel basic auth" (f31d0bd)
• fix(extension): use Proxy-Authorization for tunnel basic auth (f80f876)

v1.1.2

• fix: prevent Android notification from keeping screen on during lock (8658c5f)
• fix: swap upload/download arrows in Android notification to match web UI (a59ccb0)
• fix: prevent mobile layout shift when collapsing tunnel expand panel (466ecd5)
• fix: center expand panel padding and reduce info font size (f329ca8)

v1.1.1

• feat(extension): add Prefix parameter for custom entrypoint hostname (18a34f4)
• chore: bump deps (core v0.5.5, x v0.13.18) + rebuild web assets (2c40f12)
• fix: wait for relay bind before returning from Run() so prefix fallback works (2b719d2)

v1.1.0

• feat: add recording mode privacy descriptions with warnings in web UI and extension (3044e72)
• fix: recording mode 'full' not taking effect — empty string dropped by connector (366b09d)
• fix(extension): recording always sending 'off' to relay — two bugs (8d40c4c)
• chore: bump deps + rebuild web assets (721ecb9)
• feat(extension): per-tunnel recording mode selector in sidepanel (a6675cc)
• refactor: move record_mode from global settings to per-tunnel option (7165db3)
• feat(extension): add FeatureMetadata support to relay.js, default record.mode=off (b80ac7d)
• feat: add record mode setting (off/headers/full) across all platforms (b552e20)